Nintendo of Japan have announced an estimated 300,000 accounts were affected by login exploits in early April, where accounts were used to buy V-Bucks.

We previously reported that Nintendo of Japan confirmed that 160,000 Nintendo accounts had been accessed illicitly, after reports from users that their accounts had been used to buy hundreds of dollars worth of Fortnite V-Bucks.

The issue stemmed from an exploit allowing users to login to their Nintendo accounts using their Nintendo Network ID. Previously the Nintendo Network ID and Nintendo Accounts were separate- the former used for online gaming and with the Nintendo 3DS and Wii U, while the latter was used as a rewards program.

Nintendo gradually introduced features to combine these accounts on the Nintendo Switch, including letting users log into their Nintendo Account using their Nintendo Network ID. After the exploit was discovered, this function was disabled.

Now, Nintendo of Japan have updated their statement, revealing that an additional estimated 140,000 accounts (for a total of an estimated 300,000) had been “accessed maliciously.” Those accounts have since had their passwords reset, and Nintendo are taking “additional security measures.”

“We posted a report on unauthorized login on April 24th, but as a result of continuing the investigation after that, there were approximately 140,000 additional NNIDs that may have been accessed maliciously. It turned out that it was. We have also reset the passwords for these 140,000 NNIDs and the Nintendo accounts that were linked with them, and contacted the customer separately. At the same time, we are taking additional security measures.

Less than 1% of all NNIDs around the world that may have been illegally logged in may have actually been fraudulently traded through their Nintendo account. We are still in the process of refunding in each country, but we have already finished refunding for most customers.”

Translation: Google Translate

You can find out how to step up Two-Step verification for your Nintendo account here [US, Europe].

Image: Twitter